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Director of the U.S. Patent and Trademark Office 
Washington, D.C. 20231 



Dear Sir: 



Prior to examination, please amend the application as follows: 



RECEIVED 

FEB 1 9 2002 
Technology Center 2600 



IN THE SPECIFICATION 

Please delete section "CROSS-REFERENCE TO RELATED APPLICATIONS" on pages 1-3 
and replace with the following: 



CROSS-REFERENCE TO RELATED APPLICATIONS 

This patent application is related to co-pending U.S. Patent Application, Serial No. 10/003,501, 
entitled "METHOD AND COMPUTER READABLE MEDIUM FOR SUPPRESSING EXECUTION 
OF SIGNATURE FILE DIRECTIVES DURING A NETWORK EXPLOIT," filed October 31, 2001, co- 
assigned herewith; U.S. Patent Application, Serial No. 10/001,431, entitled "SYSTEM AND METHOD 
OF DEFINING THE SECURITY CONDITION OF A COMPUTER SYSTEM," filed October 31, 2001, 
co-assigned herewith; U.S. Patent Application, Serial No. 10/001,410, entitled "SYSTEM AND 
METHOD OF DEFINING THE SECURITY VULNERABILITIES OF A COMPUTER SYSTEM," filed 
October 31, 2001, co-assigned herewith; U.S. Patent Application, Serial No. 10/002,695, entitled 
"SYSTEM AND METHOD OF DEFINING UNAUTHORIZED INTRUSIONS ON A COMPUTER 
SYSTEM," filed October 31, 2001, co-assigned herewith; U.S. Patent Application, Serial No. 10/002,423, 
entitled "NETWORK INTRUSION DETECTION SYSTEM AND METHOD," filed October 31, 2001, 
co-assigned herewith; U.S. Patent Application, Serial No. 10/003,815, entitled "METHOD, 
COMPUTER-READABLE MEDIUM, AND NODE FOR DETECTING EXPLOITS BASED ON AN 
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CERTIFICATE OF MAILING 



Director of the U.S. Patent and Trademark Office 
Washington, D.C. 20231 

Dear Sir: 

I hereby certify that the following attached paper or fee is being deposited with the United States 
Postal Service as First Class Mail in an envelope addressed to Director of the U.S. Patent and Trademark 
Office, Washington, D.C. 2023 1, on the date below. 
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Preliminary Amendment w/ Marked-Up Version of Amendment; and 
Return Receipt Postcard. 
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